General

  • Target

    2024-02-19_19196da9c879d250768a8445978398bc_cryptolocker

  • Size

    70KB

  • Sample

    240219-f4jnpsad88

  • MD5

    19196da9c879d250768a8445978398bc

  • SHA1

    da172f977741ed48d1f13bfe16bedf07de65ea67

  • SHA256

    47c043e7dcc53d08fa7657c1ace7e2a5c5c7af49191f9e202b0598f1ba686bfe

  • SHA512

    9459090ccd69d8cbffe13e5690587125457c304300810128bf5f0ee7584532e5f88c7bba3fdd7e30032568994cc8a95122465d603608cc55ddf5b8880e0c25ad

  • SSDEEP

    1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKU1:DW60sllyWOtEvwDpjwF85b

Score
10/10

Malware Config

Targets

    • Target

      2024-02-19_19196da9c879d250768a8445978398bc_cryptolocker

    • Size

      70KB

    • MD5

      19196da9c879d250768a8445978398bc

    • SHA1

      da172f977741ed48d1f13bfe16bedf07de65ea67

    • SHA256

      47c043e7dcc53d08fa7657c1ace7e2a5c5c7af49191f9e202b0598f1ba686bfe

    • SHA512

      9459090ccd69d8cbffe13e5690587125457c304300810128bf5f0ee7584532e5f88c7bba3fdd7e30032568994cc8a95122465d603608cc55ddf5b8880e0c25ad

    • SSDEEP

      1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKU1:DW60sllyWOtEvwDpjwF85b

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks